WordPress WPO365 plugin <= 40.0 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WPO365 versions = 40.0...

EUVD-2021-30344

Malicious code in bioql PyPI...

CVE-2025-1488 WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

WordPress WPO365 Plugin <= 27.2 is vulnerable to Cross Site Scripting (XSS)

Software WPO365 Type Plugin Vulnerable versions = 27.2 Fixed in 28.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4706 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c55d5d3f53f2 Credits stealthcopter Required privilege...